registry / oh-my-claude-sisyphus / 5.7.20
oh-my-claude-sisyphus@5.7.20
Multi-agent orchestration system for Claude Code - Inspired by oh-my-opencode
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe install hook performs a platform-limited build of the package's optional native addon. Optional judgment requests require both a service key and selected points, while silent self-updates are disabled unless enabled in configuration.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The postinstall hook runs during installation; Jev requests and silent updates require explicit configuration.
Impact
No unauthorized collection, credential redirection, or harmful execution was identified.
Mechanism
The hook conditionally builds an optional native addon. Configured Jev sends judgment state and questions to its service; configured silent updates check GitHub releases and install this package.
AI rationale
The install hook performs a platform-limited build of the package's optional native addon. Optional judgment requests require both a service key and selected points, while silent self-updates are disabled unless enabled in configuration.
Evidence
native/contained-fs-${platform}-${arch}.node~/.claude/.omc-silent-update.json
Network endpoints2
api.typesafe.ai/v1/systemoneapi.github.com/repos/Yeachan-Heo/oh-my-claudecode
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The postinstall hook skips development installs and non-macOS platforms; on macOS it attempts to build the package's optional native addon.
- Jev requires a configured TYPESAFE_API_KEY and explicitly selected OMC_JEV points before sending judgment state and questions to its configured endpoint.
- Silent self-updates are gated by a configuration check that defaults to disabled.
Evidence against
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
24 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall-contained-fs.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkgdist/autoresearch/runtime.jsView file
1import { execFileSync, spawnSync } from 'child_process';
L2: import { existsSync } from 'fs';
High
Child Process
Package source references child process execution.
dist/autoresearch/runtime.jsView on unpkg · L1371encoding: 'utf-8',
L372: shell: true,
L373: maxBuffer: 1024 * 1024,
High
Findings
1 Critical16 High8 Medium7 Low
CriticalPrevious Version Dangerous Deltadist/features/auto-update.js
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processdist/autoresearch/runtime.js
HighShelldist/autoresearch/runtime.js
HighEntrypoint Build Divergencebridge/cli.cjs
HighSame File Env Network Executionscripts/release-boundary.mjs#virtual:normalized:round1
HighCredential Redirect Persistencebridge/cli.cjs
HighCommand Output Exfiltrationbridge/cli.cjs
HighHidden Inline Dependency Executionbridge/cli.cjs
HighSandbox Evasion Gated Capabilitydist/tools/lsp/servers.js
HighCloud Metadata Accessbridge/runtime-cli.cjs
Affected versions and remediation
This report applies to oh-my-claude-sisyphus@5.7.20.
See all versions of oh-my-claude-sisyphus for other recorded verdicts.
- Review the evidence and your use of oh-my-claude-sisyphus@5.7.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.